JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.248.225.237

Recent Activity

Abuse Confidence Score

100% Critical

646 reports

266 reporters · latest 2 hours ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

646 from 266 distinct reporters

First reported

May 30th 2025

Most recent report

2 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 142 🇺🇸 United States of America 99 🇳🇱 Netherlands 96

Most common categories Web App Attack 490 Bad Web Bot 185 Brute-Force 176 Hacking 143 Exploited Host 30

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-11-02 03:12:01 (2 hours ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 104.248.225.237 104.22.195.49 - - [17/Oct/2026:02:19:54 -0300] "GET /blog/.git/config HTTP/1.1" 404 18193	Bad Web Bot
🇧🇷 Peregrine	2026-11-01 03:11:49 (1 day ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 104.248.225.237 104.22.195.49 - - [17/Oct/2026:02:19:54 -0300] "GET /blog/.git/config HTTP/1.1" 404 18193	Bad Web Bot
🇧🇷 Peregrine	2026-10-30 03:11:58 (3 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 104.248.225.237 104.22.195.49 - - [17/Oct/2026:02:19:54 -0300] "GET /blog/.git/config HTTP/1.1" 404 18193	Bad Web Bot
🇧🇷 Peregrine	2026-10-29 03:11:44 (4 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 104.248.225.237 104.22.195.49 - - [17/Oct/2026:02:19:54 -0300] "GET /blog/.git/config HTTP/1.1" 404 18193	Bad Web Bot
🇧🇷 Peregrine	2026-10-27 03:11:55 (6 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 104.248.225.237 104.22.195.49 - - [17/Oct/2026:02:19:54 -0300] "GET /blog/.git/config HTTP/1.1" 404 18193	Bad Web Bot
🇳🇱 Alt255	2026-10-26 21:19:47 (6 days ago)	[ti-tinov] Web exploit scanning: 5 suspicious requests detected by fail2ban jail <name>. Example: 104.248.225.237 - - [22/Oct/2026:06:21:54 +0200] "GET /pl/.git/config HTTP/1.1" 404 7216 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.3 ... show more [ti-tinov] Web exploit scanning: 5 suspicious requests detected by fail2ban jail <name>. Example: 104.248.225.237 - - [22/Oct/2026:06:21:54 +0200] "GET /pl/.git/config HTTP/1.1" 404 7216 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36" 104.248.225.237 - - [22/Oct/2026:06:21:55 +0200] "GET /es/.git/config HTTP/1.1" 404 7216 "-" "Mozilla/5.0 (X11; NetBSD amd64; rv:16.0) Gecko/20121102 Firefox/16.0" 104.248.225.237 - - [22/Oct/2026:06:21:55 +0200] "GET /de/.git/config HTTP/1.1" 404 7216 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.90 Safari/537.36" 104.248.225.237 - - [22/Oct/2026:06:21:55 +0200] "GET /en/.git/config HTTP/1.1" 404 721 ... show less	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-10-26 03:11:51 (1 week ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 104.248.225.237 104.22.195.49 - - [17/Oct/2026:02:19:54 -0300] "GET /blog/.git/config HTTP/1.1" 404 18193	Bad Web Bot
🇳🇱 Alt255	2026-10-25 13:39:35 (1 week ago)	[ti-tinov] Web exploit scanning: 5 suspicious requests detected by fail2ban jail <name>. Example: 104.248.225.237 - - [22/Oct/2026:06:21:54 +0200] "GET /pl/.git/config HTTP/1.1" 404 7216 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.3 ... show more [ti-tinov] Web exploit scanning: 5 suspicious requests detected by fail2ban jail <name>. Example: 104.248.225.237 - - [22/Oct/2026:06:21:54 +0200] "GET /pl/.git/config HTTP/1.1" 404 7216 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36" 104.248.225.237 - - [22/Oct/2026:06:21:55 +0200] "GET /es/.git/config HTTP/1.1" 404 7216 "-" "Mozilla/5.0 (X11; NetBSD amd64; rv:16.0) Gecko/20121102 Firefox/16.0" 104.248.225.237 - - [22/Oct/2026:06:21:55 +0200] "GET /de/.git/config HTTP/1.1" 404 7216 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.90 Safari/537.36" 104.248.225.237 - - [22/Oct/2026:06:21:55 +0200] "GET /en/.git/config HTTP/1.1" 404 721 ... show less	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-10-25 03:11:48 (1 week ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 104.248.225.237 104.22.195.49 - - [17/Oct/2026:02:19:54 -0300] "GET /blog/.git/config HTTP/1.1" 404 18193	Bad Web Bot
🇩🇪 FeG Deutschland	2026-10-24 23:59:59 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 148	Exploited Host Web App Attack
🇳🇱 Savvii	2026-10-24 20:43:01 (1 week ago)	20 attempts against mh-misbehave-ban on sonic	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-24 19:33:36 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 104.248.225.237 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 15:33:29.535189 2026] [security2:error] [pid 24483:tid 24483] [client 104.248.225.237:0] M ... show more (mod_security) mod_security (id:210492) triggered by 104.248.225.237 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 15:33:29.535189 2026] [security2:error] [pid 24483:tid 24483] [client 104.248.225.237:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.yggdrasil.org"] [uri "/gaming/.git/config"] [unique_id "at0ICTn9hQ60K97WFprJWAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rip	2026-10-24 19:20:41 (1 week ago)	403 Errors: Access Forbidden	Brute-Force
🇺🇸 LotPhantom	2026-10-24 18:28:00 (1 week ago)	2026/10/24 18:27:59 [error] 1289#1289: *11485 access forbidden by rule, client: 104.248.225.237, server: wynnesmiles.com, request: "GET /endodontics/.git/config HTTP/1.1", host: "www.wynnesmiles.com" ...	Web App Attack
Anonymous	2026-10-24 18:09:30 (1 week ago)	104.248.225.237 - - [25/Oct/2026:02:09:30 +0800] "GET /tc/.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 9; SM-G901F Build/PQ3A.190705.003) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/76.0.3809.89 Mobile Safari/537.36" . ... show more 104.248.225.237 - - [25/Oct/2026:02:09:30 +0800] "GET /tc/.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 9; SM-G901F Build/PQ3A.190705.003) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/76.0.3809.89 Mobile Safari/537.36" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 646 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.210.31.41

🇩🇪 167.94.146.62

🇺🇸 162.216.150.200

🇷🇴 80.94.92.55

🇺🇸 40.74.209.135

🇺🇸 2601:443:c280:fd0:cd17:d054:4d9:4f50

🇰🇷 218.234.186.2

🇺🇸 192.3.165.146

🇳🇱 185.223.235.58

🇺🇸 172.180.64.137

🇺🇸 167.99.159.52

🇺🇸 162.216.149.109

🇮🇳 152.32.159.97

🇫🇮 147.185.133.238

🇺🇸 147.185.132.131

🇺🇸 147.185.132.73

🇻🇳 125.212.235.194

🇰🇷 118.41.205.179

🇨🇳 115.190.97.5

🇳🇱 109.160.32.126